Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/3cac6b-2c2a-4b66-adee-d52325de6b08/1/01Cgds5KjOb7afH9pKGUYUqUGvo.mft
File: 01Cgds5KjOb7afH9pKGUYUqUGvo.mft (raw, json)
Hash identifier: cOdWn1W1eua/LtekqZ8GCOOH2kxUhIoNqSdSbSt7jVQ=
Subject key identifier: E1:B8:2B:54:31:92:45:99:E2:3B:A4:64:5F:12:2D:27:3E:6C:63:04
Authority key identifier: D3:50:A0:76:CE:4A:8C:E6:FB:69:F1:FD:A4:A1:94:61:4A:94:1A:FA
Certificate issuer: /CN=d350a076ce4a8ce6fb69f1fda4a194614a941afa
Certificate serial: 019A4D74843F524F0113151ACF902A4E262F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/01Cgds5KjOb7afH9pKGUYUqUGvo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/3cac6b-2c2a-4b66-adee-d52325de6b08/1/01Cgds5KjOb7afH9pKGUYUqUGvo.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 06:01:12 +0000
Manifest this update: Tue 04 Nov 2025 06:01:12 +0000
Manifest next update: Wed 05 Nov 2025 06:01:12 +0000
Files and hashes: 1: 01Cgds5KjOb7afH9pKGUYUqUGvo.crl (hash: cwzMgW1p6AveeeDtdBN0GtucVeot92yBX74DrKuFR6A=)
2: OHSnHISpUOg0a2IaET-7LST2nHw.roa (hash: oeWDTr24DHxY0Ln8Ar9TYuW/yYnaSQVcRJXJMi+oDck=)
3: qpaxXHw6CdsxQ2wzd3NCOLPGlGs.roa (hash: hJxFH9vZ+FKOP/6zKZOcfuqIjzXEfzETnfkGtTZDPOo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/3cac6b-2c2a-4b66-adee-d52325de6b08/1/01Cgds5KjOb7afH9pKGUYUqUGvo.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/3cac6b-2c2a-4b66-adee-d52325de6b08/1/01Cgds5KjOb7afH9pKGUYUqUGvo.mft
rsync://rpki.ripe.net/repository/DEFAULT/01Cgds5KjOb7afH9pKGUYUqUGvo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:74:84:3f:52:4f:01:13:15:1a:cf:90:2a:4e:26:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d350a076ce4a8ce6fb69f1fda4a194614a941afa
Validity
Not Before: Nov 4 06:01:12 2025 GMT
Not After : Nov 5 06:01:12 2025 GMT
Subject: CN=e1b82b5431924599e23ba4645f122d273e6c6304
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:72:c1:90:4b:88:5d:63:f6:00:d8:30:e3:d2:
2c:b9:2d:10:4b:73:e5:84:02:7b:8a:57:82:8a:a2:
83:01:b0:04:3b:1d:ea:5f:86:7d:3a:68:52:2a:99:
98:91:b1:d2:6c:d5:e2:48:34:49:fb:73:50:e2:5f:
b5:aa:5f:58:90:de:f1:4b:3c:fe:33:5b:a4:69:9f:
97:f2:7a:28:7c:42:94:a7:92:1c:88:44:06:e6:ba:
6f:ed:eb:ca:d2:62:db:28:0c:c1:e6:7d:3e:44:9c:
b0:32:4c:0c:8f:ac:34:9c:3b:cb:7b:d8:72:c8:1d:
ce:76:7b:47:a7:87:bb:9b:32:88:0e:38:66:a4:2b:
ac:a4:f6:10:70:8b:50:75:08:11:20:3b:10:af:d7:
bf:5c:74:9b:1a:db:84:8e:46:f2:d0:aa:ce:26:27:
a7:5c:f1:9e:22:ef:2e:66:df:5b:38:13:63:62:1d:
6a:90:6a:ce:69:30:f9:9c:87:46:d3:9d:ce:5d:a6:
4b:60:7c:00:43:c5:73:5c:36:88:7a:dc:84:d8:71:
a5:e2:5b:a3:06:97:e5:59:ed:8a:37:20:f4:88:af:
ad:69:49:08:74:90:21:e7:9f:fa:d6:76:76:15:13:
27:d7:94:81:6b:44:76:c9:41:2e:17:c6:50:61:cf:
eb:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:B8:2B:54:31:92:45:99:E2:3B:A4:64:5F:12:2D:27:3E:6C:63:04
X509v3 Authority Key Identifier:
keyid:D3:50:A0:76:CE:4A:8C:E6:FB:69:F1:FD:A4:A1:94:61:4A:94:1A:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/01Cgds5KjOb7afH9pKGUYUqUGvo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/3cac6b-2c2a-4b66-adee-d52325de6b08/1/01Cgds5KjOb7afH9pKGUYUqUGvo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/3cac6b-2c2a-4b66-adee-d52325de6b08/1/01Cgds5KjOb7afH9pKGUYUqUGvo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:f9:44:04:ec:41:99:5c:bf:f9:00:18:47:d9:ea:27:ec:c2:
88:80:f3:ba:f7:ee:b1:db:ab:a0:ca:85:39:be:4e:50:20:2b:
09:b1:19:95:45:66:bc:9e:20:75:83:1d:d4:0b:5f:1a:6d:36:
c1:87:97:34:11:47:75:f6:b7:7c:76:0f:d2:61:e0:4f:ec:b8:
db:ca:61:80:af:32:b3:5f:3a:f4:30:aa:08:b7:3e:e8:8a:b4:
92:a3:8c:48:ef:13:2b:63:e7:9b:8b:3e:34:3c:68:bb:fc:50:
73:79:0e:0d:95:fe:41:fc:8c:92:a4:db:bf:12:89:39:d1:2b:
d4:84:c3:e4:10:41:cb:31:6d:e6:d0:b4:00:f1:80:c2:b6:74:
91:7d:f2:84:00:83:48:01:3e:de:f3:c6:fd:4a:c4:7d:de:8b:
7f:04:57:8f:ee:3d:f1:8b:0f:72:e7:fd:2a:87:40:66:74:fc:
8d:ef:44:10:b8:aa:43:bc:12:b4:02:92:5e:ac:fd:37:75:99:
d6:22:cb:bf:94:65:ee:5f:da:89:fe:09:4d:97:f4:7d:77:76:
e6:0a:67:c4:7b:8b:66:f3:91:d0:c3:82:5b:fe:91:ba:73:73:
97:82:ed:b1:57:ac:87:d9:62:1a:31:14:d4:4b:87:7c:bd:f6:
43:ce:5e:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 13:45:57 2025 by rpki-client